CobaltStrike优质学习资源

￡神魔★判官ぃ 2024-04-07 10:49 66阅读 0赞

#### 0x00 前言 ####

1.  第一部分是关于CobaltStrike优质文章的集合
2.  关于新特性BOF资源的整合
3.  解决要用的时候找不到合适aggressor script或者BOF的问题
4.  如果有本repo没有涉及的优质内容，欢迎大家提交pr

#### **0x01 相关文章合集** ####

##### **1. 基础知识参考** #####

1.  [Cobalt\_Strike\_wiki][Cobalt_Strike_wiki]
2.  [CobaltStrike4.0笔记][CobaltStrike4.0]
3.  [cobaltstrike4.1笔记][cobaltstrike4.1]
4.  [CobaltStrike相关网络文章集合][CobaltStrike]
5.  [Cobalt Strike 外部 C2【一、原理篇】][Cobalt Strike _ C2]
6.  [Cobalt Strike 桌面控制问题的解决(以及屏幕截图等后渗透工具)][Cobalt Strike]
7.  [Cobalt Strike & MetaSploit 联动][Cobalt Strike _ MetaSploit]

##### **2. 破解以及定制参考** #####

1.  [IntelliJ-IDEA修改cobaltstrike][IntelliJ-IDEA_cobaltstrike]
2.  [CobaltStrike二次开发环境准备][CobaltStrike 1]
3.  [Cobal Strike 自定义OneLiner][Cobal Strike _OneLiner]
4.  [通过反射DLL注入来构建后渗透模块(第一课)][DLL]
5.  [Cobalt Strike Aggressor Script (第一课)][Cobalt Strike Aggressor Script]
6.  [Cobalt Strike Aggressor Script (第二课)][Cobalt Strike Aggressor Script 1]

##### **3. 使用技巧参考** #####

1.  [Cobalt Strike Spear Phish][]
2.  [run CS in win -- teamserver.bat][]
3.  [Remote NTLM relaying through CS -- related to CVE\_2018\_8581][Remote NTLM relaying through CS -- related to CVE_2018_8581]
4.  [Cobalt Strike Convet VPN][]
5.  [渗透神器CS3.14搭建使用及流量分析][CS3.14]
6.  [CobaltStrike生成免杀shellcode][CobaltStrike_shellcode]
7.  [CS-notes][]\--一系列CS的使用技巧笔记
8.  [使用 Cobalt Strike 对 Linux 主机进行后渗透][Cobalt Strike _ Linux]
9.  [Cobalt Strike Listener with Proxy][]
10. [Cobalt Strike Convet VPN][]
11. [CS 4.0 SMB Beacon][]
12. [Cobalt Strike 浏览器跳板攻击][Cobalt Strike 1]
13. [Cobalt Strike 中 Bypass UAC][Cobalt Strike _ Bypass UAC]

##### **4. CobaltStrike隐匿参考** #####

1.  [CobaltStrike证书修改躲避流量审查][CobaltStrike 2]
2.  [CS 合法证书 + Powershell 上线][CS _ _ Powershell]
3.  [Cobalt Strike 团队服务器隐匿][Cobalt Strike 2]

##### **5. CobaltStrike分析参考** #####

1.  Volatility Plugin for Detecting Cobalt Strike Beacon. [blog][]|[Toolset][]
2.  [逆向分析Cobalt Strike安装后门][Cobalt Strike 3]
3.  [分析cobaltstrike c2 协议][cobaltstrike c2]
4.  Small [tool][] to decrypt a Cobalt Strike auth file

#### **0x02 C2 Profiles** ####

#### **0x03 BOF** ####

#### **0x04 Aggressor Script** ####

<table> 
 <thead> 
  <tr> 
   <th align="center">Type</th> 
   <th align="center">Name</th> 
   <th align="center">Description</th> 
   <th align="center">Popularity</th> 
   <th align="center">Language</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td align="center">BypassAV</td> 
   <td align="center"><a href="https://github.com/hack2fun/BypassAV" rel="nofollow">BypassAV</a></td> 
   <td align="center">用于快速生成免杀的可执行文件</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/57d64a58caef4a5228649e3792eeb8b977352f32/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6861636b3266756e2f4279706173734156" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/897dcaa5c15f5aeeb98cee86fcd8ac6b.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/732e8a7f0f10a5ff1eeb834872d8258baceaf73a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6861636b3266756e2f4279706173734156" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/931f42e5ff0575d31c13be7455c1d719.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">BypassAV</td> 
   <td align="center"><a href="https://github.com/k8gege/scrun" rel="nofollow">scrun</a></td> 
   <td align="center">BypassAV ShellCode Loader (Cobaltstrike/Metasploit)&nbsp;<a href="https://www.cnblogs.com/k8gege/p/11223393.html" rel="nofollow">Useage</a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/5c1b294809a6954d608cec1bd08ecf8423f8f24c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6b38676567652f736372756e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/170476b4d3410cd4bfd219a51e441d87.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/db2f9e5bd190645ad116aa886c6eb98b6562bbf4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6b38676567652f736372756e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/d32fe7476bff87a12e3a54d2f9a4b796.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">BypassAV</td> 
   <td align="center"><a href="https://github.com/wahyuhadi/beacon-c2-go" rel="nofollow">beacon-c2-go</a></td> 
   <td align="center">beacon-c2-go (Cobaltstrike/Metasploit)</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/b50e1e5ef1dcb8a36e32edce061bb2c57be06f5d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7761687975686164692f626561636f6e2d63322d676f" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/61c5961b78faebe155e4d53b166b137f.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/a25445cbd648136fec6e0f7db82fe6a296d604a9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7761687975686164692f626561636f6e2d63322d676f" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/a2a208cb2d11ee1ca450350886db3d18.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">BypassAV</td> 
   <td align="center"><a href="https://github.com/OneHone/C--Shellcode" rel="nofollow">C--Shellcode</a></td> 
   <td align="center">python ShellCode Loader (Cobaltstrike&amp;Metasploit)&nbsp;<a href="http://hone.cool/2019/11/26/%E5%85%8D%E6%9D%80-C-Shellcode%E5%8A%A0%E8%BD%BD%E5%99%A8/" rel="nofollow">Useage</a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/a6469096398c65567d3e08d7929f7eec79eed528/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4f6e65486f6e652f432d2d5368656c6c636f6465" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/8222e6d862a9cffd963153ca70c9e84d.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/22ebfb3a71b5e345b161e9fd0ff75145af914bbb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4f6e65486f6e652f432d2d5368656c6c636f6465" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/f92111aefcca9fb3ff484392e09c4af6.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Recon</td> 
   <td align="center"><a href="https://github.com/threatexpress/red-team-scripts" rel="nofollow">red-team-scripts</a></td> 
   <td align="center">perform some rudimentary Windows host enumeration with Beacon built-in commands</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/43836981d3f53c09dcf5d3c3fb880c6168c5908d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746872656174657870726573732f7265642d7465616d2d73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/bf4ade745890708d281c91b181feb5cb.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/31aa6d9491b203b6852e60bb375bbc3ff81cb63d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746872656174657870726573732f7265642d7465616d2d73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/343e4f69d140f502545f1f275d4017d8.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Recon</td> 
   <td align="center"><a href="https://github.com/tevora-threat/aggressor-powerview" rel="nofollow">aggressor-powerview</a></td> 
   <td align="center">All functions listed in the PowerView about page are included in this with all arguments for each function.&nbsp;<a href="https://github.com/PowerShellMafia/PowerSploit/blob/master/Recon/PowerView.ps1" rel="nofollow">PowerView</a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/8371f8d4d07a1950abed6418343238b34ae2ed2b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7465766f72612d7468726561742f616767726573736f722d706f77657276696577" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/9d3ef1fe377422c2d74c057f59cac9f8.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6271d64806801e7e0e77d915548dbc5d06c4530a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7465766f72612d7468726561742f616767726573736f722d706f77657276696577" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/7b0f5a2f6687fcccb0d2451b81cd358e.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Recon</td> 
   <td align="center"><a href="https://github.com/tevora-threat/PowerView3-Aggressor" rel="nofollow">PowerView3-Aggressor</a></td> 
   <td align="center">PowerView Aggressor Script for CobaltStrike&nbsp;<a href="https://github.com/PowerShellMafia/PowerSploit/blob/master/Recon/PowerView.ps1" rel="nofollow">PowerView</a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/e6e380091b0c3d19eb13e5078547358e5296ce47/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7465766f72612d7468726561742f506f77657256696577332d416767726573736f72" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/1c2775dda00624491a63e0d523f2f9cb.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/214415cbf6315a69ed1adfdc3151cdba4b854ab6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7465766f72612d7468726561742f506f77657256696577332d416767726573736f72" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/1a3f177ef8c5e81ea31cf836b4d71640.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Recon</td> 
   <td align="center"><a href="https://github.com/C0axx/AggressorScripts" rel="nofollow">AggressorScripts</a></td> 
   <td align="center">Sharphound-Aggressor- A user menu for the SharpHound ingestor</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/689cdbcb24346f3d14124cdb43f99542dbce4458/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f43306178782f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/da54e0ffbd80ee1dd708783564e00b1a.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/0c761a0ea0b0f78e1e7ee604843a850e9515a2a3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f43306178782f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/314fb432522c143653f0a5827b43e3d5.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Recon</td> 
   <td align="center"><a href="https://github.com/Adminisme/ServerScan" rel="nofollow">ServerScan</a></td> 
   <td align="center">内网横向信息收集的高并发网络扫描、服务探测工具。</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c6981a672ed356aa61955179969df0007bb8050e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f41646d696e69736d652f5365727665725363616e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/45875a64e924f7cd277feb3d3d3abfcb.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/bf286dd48ade7413daa5202557f1e57a650e1c4e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f41646d696e69736d652f5365727665725363616e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/8d3fd52aae621518d61d12b237c03bab.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/TheKingOfDuck/XSS-Fishing2-CS" rel="nofollow">XSS-Fishing2-CS</a></td> 
   <td align="center">鱼儿在cs上线后自动收杆 / Automatically stop fishing in javascript after the fish is hooked</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/748c7e8fb651e040d4c8e51808c39049dccecf7f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f5468654b696e674f664475636b2f5853532d46697368696e67322d4353" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/6add4cbeaf8768fc4bda633b272a2491.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/494ae570817bfd15c67b7fb833485d48f33c61ef/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f5468654b696e674f664475636b2f5853532d46697368696e67322d4353" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/e96790c84a2c2dccc463fd91b1c5d520.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/timwhitez/XSS-Phishing" rel="nofollow">XSS-Phishing</a></td> 
   <td align="center">xss钓鱼，cna插件配合php后端收杆</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/2cb3da325e64250313b92102cf0c5f6eb6ef51a9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f74696d77686974657a2f5853532d5068697368696e67" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/e5df5b75eecb80001c98c19b0b2ff42c.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c35974cb8f6d8e24b89ac7ab1348266325433a62/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f74696d77686974657a2f5853532d5068697368696e67" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/889048d5c1ecbff4b3c60ab30722e6b0.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/offsecginger/AggressorScripts" rel="nofollow">custom_payload_generator</a></td> 
   <td align="center">CobaltStrike3.0+ --&gt; creates various payloads for Cobalt Strike's Beacon. Current payload formats</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/f7c57700c3415452de22abd296c92edd54d0f926/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6f666673656367696e6765722f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/d3acbffd55bd7b59d7689fd38358b10d.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/05d990280076f6c7626e95ea21333bfc2e591d16/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6f666673656367696e6765722f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/4331a0fa04d264b1dc2ded9d70030440.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/gloxec/CrossC2" rel="nofollow">CrossC2</a></td> 
   <td align="center">CrossC2 framework - Generator CobaltStrike's cross-platform beacon</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/3083881dbef444e4ce176f3a5a6728c1111167ca/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f676c6f7865632f43726f73734332" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/6d14c06c01c3b8cbcf496614b528cb99.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/cccce451c59335a0cabffd54aa014feec41e8220/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f676c6f7865632f43726f73734332" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/9f9a7bc3bfabf2e7781574d751f6a180.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/Lz1y/GECC" rel="nofollow">GECC</a></td> 
   <td align="center">Go External C2 Client implementation for cobalt strike.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/0828a220ac92277f224e9e2e33e9cb1200b389b1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4c7a31792f47454343" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/f731914a84850e5b45da014bb9715105.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/74502d619c99a1f831af7dffb51a1da0bf8eb6d0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4c7a31792f47454343" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/dfd3aa1bf2668fdc73347a88763da875.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/phink-team/Cobaltstrike-MS17-010" rel="nofollow">Cobaltstrike-MS17-010</a></td> 
   <td align="center">ms17-010 exploit tool and scanner.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6b05c1c72ec041c584c03b482c254a968175dd30/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7068696e6b2d7465616d2f436f62616c74737472696b652d4d5331372d303130" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/5625affce185364b7bc1ae52b1bcc7ca.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/e682fcff5b93d62877f81092b53a0ac575c9f398/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7068696e6b2d7465616d2f436f62616c74737472696b652d4d5331372d303130" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/a83b39f5be935fd65f13210aac00ba3a.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/offsecginger/AES-PowerShellCode" rel="nofollow">AES-PowerShellCode</a></td> 
   <td align="center">Standalone version of my AES Powershell payload for Cobalt Strike.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c16d3da61412642e0d7394124dde854bfe907f54/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6f666673656367696e6765722f4145532d506f7765725368656c6c436f6465" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/5f8f6e0a1effd704a4f95dc61f5cc7f1.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/5ae4cf30ecc3e79a2f7b386de1212103cf075661/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6f666673656367696e6765722f4145532d506f7765725368656c6c436f6465" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/34fa03a6c2d38eb70f703f4593e980e6.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/Tycx2ry/SweetPotato_CS" rel="nofollow">SweetPotato_CS</a></td> 
   <td align="center">CobaltStrike4.x --&gt; SweetPotato</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/942af2bb9e42d2df78083aa4fb5a4da69d2744c4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f547963783272792f5377656574506f7461746f5f4353" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/a2d448d9412674ae0a9fc22c5335788c.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/0c1c305b308df5643d4c302faf1afe0729f51e67/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f547963783272792f5377656574506f7461746f5f4353" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/089d09bcaba820e5bd8c7ff456940104.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/rsmudge/ElevateKit" rel="nofollow">ElevateKit</a></td> 
   <td align="center">privilege escalation exploits</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/b6a5a8d1428bcefcfc0ed61025721d62e4f5804b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f72736d756467652f456c65766174654b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/e50bc929df2f3eb3de0370822f594e37.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/cfbb3b50067ace9c4a5245188a3eaa4f0b27c03d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f72736d756467652f456c65766174654b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/471695c08f0e3fe7eb4ff6a72bbb3bed.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/vysecurity/CVE-2018-4878" rel="nofollow">CVE-2018-4878</a></td> 
   <td align="center">CVE-2018-4878</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/456763689ee4dd5af98514b4e116f32a50d02832/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f767973656375726974792f4356452d323031382d34383738" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/815986e3c70187b00eb49334578ea834.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/ce63165573bba673a64cab5ec91b1a9f619ab6d6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f767973656375726974792f4356452d323031382d34383738" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/48ebb75643d795b706c45b62f5655779.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/RhinoSecurityLabs/Aggressor-Scripts" rel="nofollow">Aggressor-Scripts</a></td> 
   <td align="center">The only current public is UACBypass, whose readme can be found inside its associated folder.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/694f3c3b9c3af8d154a252fe0a755bab3cd593b6/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f5268696e6f53656375726974794c6162732f416767726573736f722d53637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/eca8876ad34bb5394cbef0ec1ae41610.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/fdb0aedf0e831d807f20d1173ae0ef6bd5dc11e3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f5268696e6f53656375726974794c6162732f416767726573736f722d53637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/41d57b7963de5a25e2d64ed1d096a2be.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/Rvn0xsy/CVE_2020_0796_CNA" rel="nofollow">CVE_2020_0796_CNA</a></td> 
   <td align="center">基于<a href="https://github.com/stephenfewer/ReflectiveDLLInjection" rel="nofollow">ReflectiveDLLInjection</a>实现的本地提权漏洞</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/e5d7d9600c7746b7c7c53a30203f177e63e0f376/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f52766e307873792f4356455f323032305f303739365f434e41" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/9cc8daf21ad8376ab66b0e8c41633926.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/d6549125aff1d9140f72ec45b204ed92bf6105c4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f52766e307873792f4356455f323032305f303739365f434e41" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/e9248f0edd83b1aa8989ed5353c24d62.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/p292/DDEAutoCS" rel="nofollow">DDEAutoCS</a></td> 
   <td align="center">setup our stage(d) Web Delivery attack</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/62141410c5aea7d00bc33667fc529d5551094719/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f703239322f4444454175746f4353" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/14f998e44c489a214200f57d7c17e080.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/00efa01f7d3364f00d14a5fbc5932c8ec4196d8b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f703239322f4444454175746f4353" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/1ff05491eab2b7c2960d8461febe9436.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Exploit</td> 
   <td align="center"><a href="https://github.com/darkr4y/geacon" rel="nofollow">geacon</a></td> 
   <td align="center">Implement CobaltStrike's Beacon in Go (can be used in Linux)</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/96fc9632e55a2d919f48788a0b62c6a77477a510/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6461726b7234792f676561636f6e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/e1038d34275991d64357a0cc70fe3eec.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/d6c52512c22ac89a11110f6bbeec79ba44f2472a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6461726b7234792f676561636f6e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/77d3872afd84a020400da3e4de38ac25.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Persistence</td> 
   <td align="center"><a href="https://github.com/ZonkSec/persistence-aggressor-script" rel="nofollow">persistence-aggressor-script</a></td> 
   <td align="center">persistence-aggressor-script</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/15dceac104ff5b811413927ae01cadc6ebd1ad5c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f5a6f6e6b5365632f70657273697374656e63652d616767726573736f722d736372697074" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/e419b81c0b62eb0da0f2ecf97c5884d3.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/5a440715a7f463fbb59b766f848eea58b193188c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f5a6f6e6b5365632f70657273697374656e63652d616767726573736f722d736372697074" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/64b39cabf35ec44c3b3ccff596a80ae5.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Persistence</td> 
   <td align="center"><a href="https://github.com/m0ngo0se/Peinject_dll" rel="nofollow">Peinject_dll</a></td> 
   <td align="center">弃用winexec函数，使用shellexecute函数，程序流不在卡顿，达到真正的无感。</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/0786040437c9ab298e77d3b6b8860108ab30fce9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d306e676f3073652f5065696e6a6563745f646c6c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/37139d53731777f3d5f362278bfe7dbe.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c9ab4a786424534f3bd3cb5cefbfe1fc92aef95d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d306e676f3073652f5065696e6a6563745f646c6c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/01389adb55c7e78133443ee5607c4fd3.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Persistence</td> 
   <td align="center"><a href="https://github.com/rasta-mouse/TikiTorch" rel="nofollow">TikiTorch</a></td> 
   <td align="center">TikiTorch follows the same concept(<a href="https://github.com/vysecurity/CACTUSTORCH" rel="nofollow">CACTUSTORCH</a>) but has multiple types of process injection available, which can be specified by the user at compile time.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/fb6d58ffc22c8d3f0330ca7658098d6ab63b9868/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f72617374612d6d6f7573652f54696b69546f726368" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/01ffb1d5093f53af43dd97cf3425bf0c.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/33f067f586fc82ee5c9e91e847446cd606c06579/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f72617374612d6d6f7573652f54696b69546f726368" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/bed8bea19f48c12a49943b68a64bf828.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Persistence</td> 
   <td align="center"><a href="https://github.com/mdsecactivebreach/CACTUSTORCH" rel="nofollow">CACTUSTORCH</a></td> 
   <td align="center">A JavaScript and VBScript shellcode launcher. This will spawn a 32 bit version of the binary specified and inject shellcode into it.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6d133f9d3ccb8a5829a7eb44d750b52c937dc00b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d647365636163746976656272656163682f434143545553544f524348" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/fee2c0ea38912a7fd0f51ca916d208cf.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/db4f10d386f3b42655a53dae7c3cb058f1366dd0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d647365636163746976656272656163682f434143545553544f524348" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/03d0574af961407317dca7574082ccab.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Persistence</td> 
   <td align="center"><a href="https://github.com/Ch1ngg/AggressorScript-UploadAndRunFrp" rel="nofollow">UploadAndRunFrp</a></td> 
   <td align="center">上传frpc并且运行frpc</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6910580388c02618102e7952098e922883ae8488/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4368316e67672f416767726573736f725363726970742d55706c6f6164416e6452756e467270" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/4345101832808323655488aaafa98173.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/e93fad02a3c03161e0e838e8685f30d0c1059b40/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4368316e67672f416767726573736f725363726970742d55706c6f6164416e6452756e467270" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/cb8d5ad43f54a34bec78de7681d70d76.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Persistence</td> 
   <td align="center"><a href="https://github.com/threatexpress/persistence-aggressor-script" rel="nofollow">persistence-aggressor-script</a></td> 
   <td align="center"><a href="https://zonksec.com/blog/persistence-aggressor-script/" rel="nofollow">Persistence Aggressor Script</a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/d1f721234d96e828ba030a535bd0b9bedfadaac3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746872656174657870726573732f70657273697374656e63652d616767726573736f722d736372697074" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/c07ef3b64f245c98a52878a4312f8a77.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/265facc56e240606c7d5bef817829310af90e5be/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746872656174657870726573732f70657273697374656e63652d616767726573736f722d736372697074" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/ea157bedc706e977b36d7ce0e68641cf.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/Rvn0xsy/Cobaltstrike-atexec" rel="nofollow">Cobaltstrike-atexec</a></td> 
   <td align="center">利用任务计划进行横向，需要与135端口、445端口进行通信</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/498d14a2aad95cabd35564ba17de4c34e111bbd7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f52766e307873792f436f62616c74737472696b652d617465786563" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/c992ce08d0f5b32543366df1d347edd9.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/511b0df6cbc3ae4e22425da323f71d4b3d831f86/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f52766e307873792f436f62616c74737472696b652d617465786563" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/e9b6a07c15cc2e5e54dfa7fa500b679f.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/SpiderLabs/SharpCompile" rel="nofollow">SharpCompile</a></td> 
   <td align="center">SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/29516f896aa88e4098195ca9202c21822c53e48c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f5370696465724c6162732f5368617270436f6d70696c65" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/f326b368d78e7ff911673daf1db2b641.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/84d7189701e087c295621df9251670302d0d8ef4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f5370696465724c6162732f5368617270436f6d70696c65" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/f4093f3965c2b04efe23fed51e19fa0d.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/icebearfriend/Quickrundown" rel="nofollow">Quickrundown</a></td> 
   <td align="center">Utilizing QRD will allow an operator to quickly characterize what processes are both known and unknown on a host through the use of colors and notes about the processes displayed.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/aa47d575cd07556f7ef58b3a1d07287803fce84c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f69636562656172667269656e642f517569636b72756e646f776e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/a5a565ec5a59d41bb5837554a390b111.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/76d3b8c7391aee47cf221e2670deb21221542155/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f69636562656172667269656e642f517569636b72756e646f776e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/f1eefab8073ee50c9bdf7517671caff4.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/p292/Phant0m_cobaltstrike" rel="nofollow">Phant0m_cobaltstrike</a></td> 
   <td align="center">This script walks thread stacks of Event Log Service process (spesific svchost.exe) and identify Event Log Threads to kill Event Log Service Threads. So the system will not be able to collect logs and at the same time the Event Log Service will appear to be running.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/f0c946656bda6ee4944b414e67e5ee2835f94a2e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f703239322f5068616e74306d5f636f62616c74737472696b65" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/662211f5f7881155865ee3699384e56e.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/97e730dc8975077916645bad5cb49416400ea1e1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f703239322f5068616e74306d5f636f62616c74737472696b65" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/c415574189d96ecd46f641e37d1e0740.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/bitsadmin/nopowershell" rel="nofollow">NoPowerShell</a></td> 
   <td align="center">NoPowerShell is a tool implemented in C# which supports executing PowerShell-like commands while remaining invisible to any PowerShell logging mechanisms.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/5dc4603bd5b55420eb76e898206b78369e70d790/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6269747361646d696e2f6e6f706f7765727368656c6c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/9331a357d17c8eabb2962f26f9d5bd89.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/7c7028e9b4fec1d2de9f34d0d6bdb7563112d258/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6269747361646d696e2f6e6f706f7765727368656c6c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/1473398a7245c1932c4fd27bb3ff900f.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/QAX-A-Team/EventLogMaster" rel="nofollow">EventLogMaster</a></td> 
   <td align="center">RDP EventLog Master</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/41cbbb5c57da5966d4e4c1487ade949ddf713156/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f5141582d412d5465616d2f4576656e744c6f674d6173746572" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/5c009c9a084c38548104485b26e90581.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/0163ed1f48c40cfe4f6756aebb1b398e9c702481/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f5141582d412d5465616d2f4576656e744c6f674d6173746572" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/9e1448a0173aff4114a5c32cf63e1780.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/vysecurity/ANGRYPUPPY" rel="nofollow">ANGRYPUPPY</a></td> 
   <td align="center">Bloodhound Attack Path Execution for Cobalt Strike</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/cb11b2bca2bf688e3048e950d51518401638f210/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f767973656375726974792f414e4752595055505059" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/18910a531b9bcbbb1a83f8ddcbfd7d2c.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/8f93871a5e692c5ef0ac60a450215f26c10c6e0b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f767973656375726974792f414e4752595055505059" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/65c95f9f45e539b16aa59e0e2a44bb58.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/a1ices/CobaltStrike_Script_Wechat_Push" rel="nofollow">CobaltStrike_Script_Wechat_Push</a></td> 
   <td align="center">上线微信提醒的插件,通过微信Server酱提醒</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/a21a2f2b43c0665766e4919c9d830343855a2dfd/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6131696365732f436f62616c74537472696b655f5363726970745f5765636861745f50757368" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/300e25b93783344aacee85aec033fba8.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/8b57c13aeaaf970a855273db79358d3881acc907/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6131696365732f436f62616c74537472696b655f5363726970745f5765636861745f50757368" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/63d108129d600d350b145c8b28180cc8.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/secgroundzero/CS-Aggressor-Scripts" rel="nofollow">CS-Aggressor-Scripts</a></td> 
   <td align="center">slack and webhooks reminder</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/502310a8cf333cbc5ab83247f123ff0ff9cbf628/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f73656367726f756e647a65726f2f43532d416767726573736f722d53637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/930530e8ab4a0cd20bba4037d1b09937.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/483de9f922ee062c55754ba4e0ce08f2e2abb479/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f73656367726f756e647a65726f2f43532d416767726573736f722d53637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/78e5f658afbed0fa8c29ae54a23adf01.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/skyleronken/Aggressor-Scripts" rel="nofollow">Aggressor-Scripts</a></td> 
   <td align="center">surveying of powershell on targets (在对应的目标上检测powershell的相关信息)</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c96a1912d7233e9aa3e8fbabd426909a2f4ffe2f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f736b796c65726f6e6b656e2f416767726573736f722d53637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/3951742c65d4733345aca8f49dac84fe.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/f14afe76ab5a6f28119b878f3190857bc09aa9a3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f736b796c65726f6e6b656e2f416767726573736f722d53637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/52bdf26ee98a047296396728b25765e4.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/tomsteele/cs-magik" rel="nofollow">cs-magik</a></td> 
   <td align="center">Implements an events channel and job queue using Redis for Cobalt Strike.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c3d3beb20942d76885ae39a7acf2411732be816c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746f6d737465656c652f63732d6d6167696b" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/cf3d03888cce3430712ea6768c7728d1.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/91660cfd9b6c1f5ceaae94b819ba28657a725390/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746f6d737465656c652f63732d6d6167696b" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/f01f6961d5573a30fdcf7d31ca1956cb.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/zer0yu/AggressorScripts" rel="nofollow">AggressorScripts</a></td> 
   <td align="center">查看进程的时候讲av进程标注为红色</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/8db0f66d3b14adb24ca32a44c5a60748389731f5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f7a65723079752f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/fdb5955d66f9d79dd68884905b897251.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/f63185fd6b4edf4b62e7576aa5bbc909d01d6b12/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f7a65723079752f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/2a298d0d0ef8096e435f8256bdf1c0a0.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/xorrior/raven" rel="nofollow">Raven</a></td> 
   <td align="center">CobaltStrike External C2 for Websockets</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/f6c6db875121af4c276de628a66fa18993b37155/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f786f7272696f722f726176656e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/1998d1cb9dc33eec5320d3fb50260b2f.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/71c9d70254861e0eb81677d867155aee3c958404/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f786f7272696f722f726176656e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/309dc0e0972612145942e97341f90d77.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/Sentinel-One/CobaltStrikeParser" rel="nofollow">CobaltStrikeParser</a></td> 
   <td align="center">Python parser for CobaltStrike Beacon's configuration</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/437b51581816222066ecdba3804b6fb3b2251b5a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f53656e74696e656c2d4f6e652f436f62616c74537472696b65506172736572" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/9cab2d0553191e2d4b218186daf24ae1.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/68b06c64057ff5e1846d9cb84d838d1b22ff7a67/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f53656e74696e656c2d4f6e652f436f62616c74537472696b65506172736572" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/af04fa066a7ff7cf879f91dd002e2d2c.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/bitsadmin/fakelogonscreen" rel="nofollow">fakelogonscreen</a></td> 
   <td align="center">FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6245a8b89b49c072cbfec173f083ab936c79f949/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6269747361646d696e2f66616b656c6f676f6e73637265656e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/c2d0417fbb6310a4eff139b3d51bbf54.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6aa43bc907dbcd7cc9aff03f23c8fafff53a1604/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6269747361646d696e2f66616b656c6f676f6e73637265656e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/5244c93103f6c593003e74a0f92f8f15.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Auxiliary</td> 
   <td align="center"><a href="https://github.com/Lz1y/SyncDog" rel="nofollow">SyncDog</a></td> 
   <td align="center">Make bloodhound sync with cobaltstrike.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/1f5a505a8a70d5bb3d594904b5b486dadeff5d75/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4c7a31792f53796e63446f67" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/32af773c7a3a97cc0bdbecdf4a169c01.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/ade68faa5dc0fa2348fe4a22a1fcc426545432a1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4c7a31792f53796e63446f67" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/c701525dd9a8ac79a87a28b8c086f04c.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/DeEpinGh0st/Erebus" rel="nofollow">Erebus</a></td> 
   <td align="center">CobaltStrike4.x --&gt; Erebus CobaltStrike后渗透测试插件</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/815c5a874f0a1bb34a2731ebdb3f5bf8dd54582e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f44654570696e47683073742f457265627573" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/4f6e9867a64f09c9eac77ec4735f57b3.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6a40fa2e8eeff3b9759ff9d74bf80a1339b05a05/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f44654570696e47683073742f457265627573" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/6aafa1e53476998c2f5f2acefc6fc00b.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/timwhitez/Cobalt-Strike-Aggressor-Scripts" rel="nofollow">Cobalt-Strike-Aggressor-Scripts</a></td> 
   <td align="center">CobaltStrike后渗透测试插件集合&nbsp;<a href="https://github.com/timwhitez/Cobalt-Strike-Aggressor-Scripts/wiki/Usage" rel="nofollow">Usage</a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/0491ab4c28da5f5066029ab7a30663f92e5fb5d3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f74696d77686974657a2f436f62616c742d537472696b652d416767726573736f722d53637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/7be172cbd216a946422ccc55a20955fb.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/d0217114ad2bb0d9ed6cb7644bfce1808e32eba4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f74696d77686974657a2f436f62616c742d537472696b652d416767726573736f722d53637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/0368e1b078d36247319ff0bed581327f.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/bluscreenofjeff/AggressorScripts" rel="nofollow">AggressorScripts</a></td> 
   <td align="center">Aggressor scripts for use with Cobalt Strike 3.0+</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/a42bacfd7b054e8475e4f6cdf1f4724063244b77/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f626c7573637265656e6f666a6566662f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/5e970d1bd50d1f045bc88e8a2b70862e.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/00a6e797ab2c5fd75afd451a6e5feac8d93446a1/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f626c7573637265656e6f666a6566662f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/a7380162106f392976b93701b6a5802f.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/lengjibo/RedTeamTools" rel="nofollow">RedTeamTools</a></td> 
   <td align="center">RedTeamTools for use with Cobalt Strike</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/f416a9784b0ed8cd695cfdd3152d90fe8b44d2c9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6c656e676a69626f2f5265645465616d546f6f6c73" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/fa0d6e7f2ea6b81cc37161865b4b962c.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/a46108f94f4a82573bd0656165e80464da08fed9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6c656e676a69626f2f5265645465616d546f6f6c73" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/73c706fd8ba463f230402ded4f7c025a.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/mgeeky/cobalt-arsenal" rel="nofollow">cobalt-arsenal</a></td> 
   <td align="center">Aggressor Scripts for Cobalt Strike 4.0+</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6e7e120617d95009df4a5e6b033eb4da0bf90feb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d6765656b792f636f62616c742d617273656e616c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/6f1ccb7eac809ee60f3e3d63a8bb6c32.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/e0dcccfa41fb48b5095855f3a970224d3eb252e7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d6765656b792f636f62616c742d617273656e616c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/748c376291d159c9bd4597b3e0a267d2.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/0xthirteen/MoveKit" rel="nofollow">MoveKit</a></td> 
   <td align="center">The aggressor script handles payload creation by reading the template files for a specific execution type.&nbsp;<a href="https://www.4hou.com/posts/jO1y" rel="nofollow">intro</a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/5ced56eba50b6e51c6ae8acc9823a9869ba5ad0f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f3078746869727465656e2f4d6f76654b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/76d848bbc47362567d4af6186d30d6ef.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6973046731513460f7660359953f7878531796b0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f3078746869727465656e2f4d6f76654b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/585dc5c394d0e6a1cdd891b3cce941e8.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/0xthirteen/StayKit" rel="nofollow">StayKit</a></td> 
   <td align="center">The aggressor script handles payload creation by reading the template files for a specific execution type.&nbsp;<a href="https://www.4hou.com/posts/jO1y" rel="nofollow">intro</a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6bdaa1047384f2a100a7f7b00094ede1cd9323ae/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f3078746869727465656e2f537461794b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/b768b26f9a73114f7b11ed05e95698db.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/f55c5395de2da5ff99c7afaa88c3b59b96830f3d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f3078746869727465656e2f537461794b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/75779b8484f4cc9205909a789db13e06.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/ramen0x3f/AggressorScripts" rel="nofollow">AggressorScripts</a></td> 
   <td align="center">AggressorScripts</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/2ecd9a8785dd208a69ae61514bada600f1fa9cf3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f72616d656e307833662f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/3a846824cdada65dda84afdb6c4ae3f5.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/0a257e48927bc042240532ccf5590417393a8441/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f72616d656e307833662f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/905bcba43c9266f7484658b60e409ba0.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/harleyQu1nn/AggressorScripts" rel="nofollow">AggressorScripts</a></td> 
   <td align="center">Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/5687e3740d4588f03a5949677771e1759478c1f9/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6861726c65795175316e6e2f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/a0a12f71010e645e7b76b6229886e69a.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/32e465c402231203705125f13f2f007fd7cf6998/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6861726c65795175316e6e2f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/6b8b1717112ee417a99dc7f5764e41a7.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/ramen0x3f/AggressorScripts" rel="nofollow">AggressorScripts</a></td> 
   <td align="center">AggressorScripts</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/2ecd9a8785dd208a69ae61514bada600f1fa9cf3/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f72616d656e307833662f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/be9558a4f5d507acec5398f99d3cc939.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/0a257e48927bc042240532ccf5590417393a8441/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f72616d656e307833662f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/68de87e1456b16a4f85c4996a7712d08.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/vysecurity/Aggressor-VYSEC" rel="nofollow">Aggressor-VYSEC</a></td> 
   <td align="center">Contains a bunch of CobaltStrike Aggressor Scripts</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/141447b3a28b3ea77b58951b9d67cf3dde7c04b2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f767973656375726974792f416767726573736f722d5659534543" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/01f909e777a7c339f5e1b241ad9840ca.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/3ea153415a1c2ac776fa0373c12af31cccc3d081/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f767973656375726974792f416767726573736f722d5659534543" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/1b01fd3edbe429242d0abac7ead9039e.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/FortyNorthSecurity/AggressorAssessor" rel="nofollow">AggressorAssessor</a></td> 
   <td align="center">AggressorAssessor</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/14fe049e3d07b9493612279b0b744e5c7a01f4b8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f466f7274794e6f72746853656375726974792f416767726573736f724173736573736f72" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/00a363f0515eed9218135c8cd110baa8.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/df98ae8c0619b41aba61b8fb144f53af36ee2e5d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f466f7274794e6f72746853656375726974792f416767726573736f724173736573736f72" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/9240793da431102b887fd0106c104084.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/FortyNorthSecurity/AggressorAssessor" rel="nofollow">AggressorAssessor</a></td> 
   <td align="center">AggressorAssessor</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/14fe049e3d07b9493612279b0b744e5c7a01f4b8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f466f7274794e6f72746853656375726974792f416767726573736f724173736573736f72" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/88071859227d6731e6c708a3237b1fcb.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/df98ae8c0619b41aba61b8fb144f53af36ee2e5d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f466f7274794e6f72746853656375726974792f416767726573736f724173736573736f72" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/1df80cb6922bf71c1b5bb44a6c2a3d68.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/threatexpress/aggressor-scripts" rel="nofollow">aggressor-scripts</a></td> 
   <td align="center">Collection of Cobalt Strike Aggressor Scripts</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/0cf5807ebed30e3430a5090169fbb1bd055426e5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f746872656174657870726573732f616767726573736f722d73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/4d86e0f024b4cfc892eb8b763f6e7e6a.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/7f17d34bf2de952d698eb026b26140d7d0b9e10e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f746872656174657870726573732f616767726573736f722d73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/431e633e47b80bf855b9d92b80d4f65b.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/Und3rf10w/Aggressor-scripts" rel="nofollow">Aggressor-scripts</a></td> 
   <td align="center">This is just a random collection of Aggressor Scripts I've written for Cobalt Strike 3.x. (其中有一个debug脚本比较好用)</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/a1fd62c782eda4881513b19ccfc84f4bfc73e6e2/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f556e643372663130772f416767726573736f722d73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/65b87c5e3f589ff7d0b4b47698a32579.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/24b1796030d6803e906b49bd1808395b7679e5e0/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f556e643372663130772f416767726573736f722d73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/7b27a9c3addd22591fec15e16b8c74c6.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/rasta-mouse/Aggressor-Script" rel="nofollow">Aggressor-Script</a></td> 
   <td align="center">Collection of Aggressor Scripts for Cobalt Strike(主要包含了提权和权限维持脚本)</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/07d0c0893a737c2040e807f7d6f5a99ded5b2790/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f72617374612d6d6f7573652f416767726573736f722d536372697074" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/a38239d62b60c8ada3730eb13716f02f.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/deb8b9a82d32e7a0c64af44f8244027ad0c06adb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f72617374612d6d6f7573652f416767726573736f722d536372697074" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/3de010707f9ec00b72678d2f714b2591.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/QAX-A-Team/CobaltStrike-Toolset" rel="nofollow">Aggressor-Script</a></td> 
   <td align="center">Aggressor Script, Kit, Malleable C2 Profiles, External C2 and so on</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/83aa7cecfed9cbc05218154621586d668ca0177b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f5141582d412d5465616d2f436f62616c74537472696b652d546f6f6c736574" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/27517a9c19ed983cc7f2dbdd22c148e6.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c4ba528fffb7510f882cd70d8057e0e492d7e956/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f5141582d412d5465616d2f436f62616c74537472696b652d546f6f6c736574" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/fa9f36b996bccb0e712a9c76366248e4.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/michalkoczwara/aggressor_scripts_collection" rel="nofollow">aggressor_scripts_collection</a></td> 
   <td align="center">Collection of various aggressor scripts for Cobalt Strike from awesome people. Will be sure to update this repo with credit to each person.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/72a2fdd85045cb30dfefd6123022757aafe34d37/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d696368616c6b6f637a776172612f616767726573736f725f736372697074735f636f6c6c656374696f6e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/9819d9ba760965ff97f53543116abe95.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c26ea2fdbb89d9fc823b5ccd69af4731ce931b63/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d696368616c6b6f637a776172612f616767726573736f725f736372697074735f636f6c6c656374696f6e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/e60f4bab3d16c4777279973a5d0aad17.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/killswitch-GUI/CobaltStrike-ToolKit" rel="nofollow">CobaltStrike-ToolKit</a></td> 
   <td align="center">googlesearch.profile and script related to AD.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/e9461b3ae62a7409dfad41734e9045065bb6084c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6b696c6c7377697463682d4755492f436f62616c74537472696b652d546f6f6c4b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/eba01d9ed72fe035e7d52ddda857eb1d.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/abd4c40e9dc1b58afc96abe329e8d31e15b5c739/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6b696c6c7377697463682d4755492f436f62616c74537472696b652d546f6f6c4b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/bfa274e5548fe3f48d30a90e234b6a40.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/Cliov/Arsenal" rel="nofollow">Arsenal</a></td> 
   <td align="center">Cobalt Strike 3.13 Arsenal Kit</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/52715822907470bb48e9603af73b0e424de68b6a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f436c696f762f417273656e616c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/608db9b7274b14a9cf09aeff9234d5df.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/a0cef7286a9e02359c6c3dd1be084c0f41bf418e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f436c696f762f417273656e616c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/63d1ed5ab8f30b2ce4e8e566beb22c96.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/mgeeky/cobalt-arsenal" rel="nofollow">cobalt-arsenal</a></td> 
   <td align="center">My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/6e7e120617d95009df4a5e6b033eb4da0bf90feb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6d6765656b792f636f62616c742d617273656e616c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/1509bf6736140dded7fda97204527616.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/e0dcccfa41fb48b5095855f3a970224d3eb252e7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6d6765656b792f636f62616c742d617273656e616c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/d13489f925e59e72db27e57a72ac2486.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/001SPARTaN/aggressor_scripts" rel="nofollow">aggressor_scripts</a></td> 
   <td align="center">code execution via DCOM;the privilege escalation techniques included in ElevateKit;etc.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/52715822907470bb48e9603af73b0e424de68b6a/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f436c696f762f417273656e616c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/44845a9aaefeb7942c8f0c55529d289b.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/a0cef7286a9e02359c6c3dd1be084c0f41bf418e/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f436c696f762f417273656e616c" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/b80ed01efb2d1847dbdc6e3dc60b4f01.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/001SPARTaN/aggressor_scripts" rel="nofollow">aggressor_scripts</a></td> 
   <td align="center">code execution via DCOM;the privilege escalation techniques included in ElevateKit;etc.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/aed74e25368aa1aa603599cc2763a047573ba008/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f3030315350415254614e2f616767726573736f725f73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/4328d9c6a8914f11fff23e2fb3333bcc.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c00ea173159f2b3afa1ebdab3edcd914c93af8a8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f3030315350415254614e2f616767726573736f725f73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/6ba7d4f3c30e5718155b113d6eb602ce.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/gaudard/scripts/tree/master/red-team/aggressor" rel="nofollow">aggressor</a></td> 
   <td align="center">creating tunnels with netsh; changed default to bit.ly redirect to mcdonalds;using powershell to kill parent process;</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/aed74e25368aa1aa603599cc2763a047573ba008/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f3030315350415254614e2f616767726573736f725f73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/fe63cc9436e3f4225ddb934b4b0656ae.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/c00ea173159f2b3afa1ebdab3edcd914c93af8a8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f3030315350415254614e2f616767726573736f725f73637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/0e320158a3fec416853633ad799cf07e.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/branthale/CobaltStrikeCNA" rel="nofollow">CobaltStrikeCNA</a></td> 
   <td align="center">A collection of scripts - from various sources - see script for more info.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/de1ebc2427a1bfac6128dc8cf3b63a86fb8b93ab/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6272616e7468616c652f436f62616c74537472696b65434e41" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/18f1cc204971ffafeda1a5e998b3a0f3.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/06b3a8bf8cb13d3112ce3e03fc8b780fa6ec5086/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6272616e7468616c652f436f62616c74537472696b65434e41" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/4843972ed38ae54440e3aa30e9ee6bec.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/oldb00t/AggressorScripts" rel="nofollow">AggressorScripts</a></td> 
   <td align="center">Highlights selected processes from the ps command in beacon;Loads various aliases into beacon;sets a few defaults for scripts to be used later..</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/98e7eff3410c42cd231616585f30f83c64076864/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6f6c64623030742f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/02f86b4a508e3e88b48b50a1e1c92ac8.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/b8cb55f5fe02dbe5e38ce1434cfacb9e0fff9544/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6f6c64623030742f416767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/312919a1d1357b49453a5c56bad39fcd.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/FortyNorthSecurity/AggressorAssessor" rel="nofollow">AggressorAssessor</a></td> 
   <td align="center">从C2生成到横向移动的全辅助脚本套件</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/14fe049e3d07b9493612279b0b744e5c7a01f4b8/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f466f7274794e6f72746853656375726974792f416767726573736f724173736573736f72" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/dce28681182f9c4f48075db2cbd22604.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/df98ae8c0619b41aba61b8fb144f53af36ee2e5d/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f466f7274794e6f72746853656375726974792f416767726573736f724173736573736f72" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/a2148675a53262f1385ccaa2bc2defa6.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/invokethreatguy/AggressorCollection" rel="nofollow">AggressorCollection</a></td> 
   <td align="center">Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/e5326612df4fcf99d3862927b2d6f8aad5f08507/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f696e766f6b657468726561746775792f416767726573736f72436f6c6c656374696f6e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/41c0738b46ed650dc49429a2d7adedca.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/a765d11e4b7c5567424e85186a9311316de9a47b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f696e766f6b657468726561746775792f416767726573736f72436f6c6c656374696f6e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/490cbda82beccb17a7d49bf70e0de532.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/bytecod3r/Cobaltstrike-Aggressor-Scripts-Collection" rel="nofollow">Cobaltstrike-Aggressor-Scripts-Collection</a></td> 
   <td align="center">The collection of tested cobaltstrike aggressor scripts.</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/584d63e59f5b2f82a8877701234dd92d6400b37c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f62797465636f6433722f436f62616c74737472696b652d416767726573736f722d536372697074732d436f6c6c656374696f6e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/3c9c746e755a3164de8e6343d2796b74.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/934487e239180e46b11d3907a94d5d71bcd1cac5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f62797465636f6433722f436f62616c74737472696b652d416767726573736f722d536372697074732d436f6c6c656374696f6e" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/bc63a94ecbead0898f38384a9a0cbca7.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/Matrix20085/aggressorScripts" rel="nofollow">aggressorScripts</a></td> 
   <td align="center">CobaltStrike AggressorScripts for the lazy</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/5b8c6cb9cf83ff8f32fab333a9bd75fb2b21f6f4/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f4d617472697832303038352f616767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/86cda06cd99f9b2a876513b2b060f6f0.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/2da394c7c14e477586185b5610bc7b1fb9467459/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f4d617472697832303038352f616767726573736f7253637269707473" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/95579b2459780076c6bae61a07641944.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
  <tr> 
   <td align="center">Synthesis</td> 
   <td align="center"><a href="https://github.com/josephkingstone/cobalt_strike_extension_kit" rel="nofollow">cobalt_strike_extension_kit</a></td> 
   <td align="center">集成了SharpHound,SharpRDP,SharpWMI等在内的各种内网工具，使用AggressorScripts构建workflow</td> 
   <td align="center"><a href="https://camo.githubusercontent.com/b3defe1c08175d764367aa7b1786102d18046935/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f6a6f736570686b696e6773746f6e652f636f62616c745f737472696b655f657874656e73696f6e5f6b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/04b8d3a3d3f5446a9aef8da90ce30bff.png" alt="" style="outline: none;"> 
     </div></a></td> 
   <td align="center"><a href="https://camo.githubusercontent.com/28a5bcae7c644fb8ad3ab6ccb711c1df8d7e704c/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c616e6775616765732f746f702f6a6f736570686b696e6773746f6e652f636f62616c745f737472696b655f657874656e73696f6e5f6b6974" rel="nofollow"> 
     <div style="text-align: center;"> 
      <img src="https://img-blog.csdnimg.cn/img_convert/3248e64647a26bc25ed0eeddeaf0145a.png" alt="" style="outline: none;"> 
     </div></a></td> 
  </tr> 
 </tbody> 
</table>

#### **0x05 Related Tools** ####

#### **0x06 Source Code** ####

<table> 
 <thead> 
  <tr> 
   <th align="center">Type</th> 
   <th align="center">Name</th> 
   <th align="center">Description</th> 
  </tr> 
 </thead> 
 <tbody> 
  <tr> 
   <td align="center">Source</td> 
   <td align="center"><a href="https://github.com/Skactor/cobalt-strike-source" rel="nofollow">cobalt-strike-source</a></td> 
   <td align="center">Cobalt Strike 3.12 Source Code (Decompiled and Fixed)</td> 
  </tr> 
 </tbody> 
</table>

[Cobalt_Strike_wiki]: https://github.com/aleenzz/Cobalt_Strike_wiki
[CobaltStrike4.0]: https://github.com/Snowming04/CobaltStrike4.0_related
[cobaltstrike4.1]: https://wbglil.gitbook.io/cobalt-strike/
[CobaltStrike]: https://4hou.win/wordpress/?cat=306
[Cobalt Strike _ C2]: http://blog.leanote.com/post/snowming/50448511de58
[Cobalt Strike]: http://blog.leanote.com/post/snowming/32fabf2deae1
[Cobalt Strike _ MetaSploit]: http://blog.leanote.com/post/snowming/43cef4b64cbd
[IntelliJ-IDEA_cobaltstrike]: https://pingmaoer.github.io/2020/06/08/IntelliJ-IDEA%E4%BF%AE%E6%94%B9cobaltstrike/
[CobaltStrike 1]: https://pingmaoer.github.io/2020/06/24/CobaltStrike%E4%BA%8C%E6%AC%A1%E5%BC%80%E5%8F%91%E7%8E%AF%E5%A2%83%E5%87%86%E5%A4%87/
[Cobal Strike _OneLiner]: https://evi1cg.me/archives/Custom_Oneliner.html
[DLL]: https://payloads.online/archivers/2020-03-02/1
[Cobalt Strike Aggressor Script]: https://payloads.online/archivers/2020-03-02/4
[Cobalt Strike Aggressor Script 1]: https://payloads.online/archivers/2020-03-02/5
[Cobalt Strike Spear Phish]: https://evi1cg.me/archives/spear_phish.html
[run CS in win -- teamserver.bat]: https://evi1cg.me/archives/teamserver.html
[Remote NTLM relaying through CS -- related to CVE_2018_8581]: https://evi1cg.me/archives/Remote_NTLM_relaying_through_CS.html
[Cobalt Strike Convet VPN]: http://blog.leanote.com/post/snowming/82b418239c13
[CS3.14]: https://mp.weixin.qq.com/s/DG87HFrwHf25_M2Dnfdx3g
[CobaltStrike_shellcode]: https://mp.weixin.qq.com/s/G1hmsDVTO2208Ymlia_ggQ
[CS-notes]: https://github.com/kluo84/CS-notes
[Cobalt Strike _ Linux]: http://blog.leanote.com/post/snowming/c34f9defe00c
[Cobalt Strike Listener with Proxy]: http://blog.leanote.com/post/snowming/2ec80f7823e0
[CS 4.0 SMB Beacon]: http://blog.leanote.com/post/snowming/8b7ce0f84c03
[Cobalt Strike 1]: http://blog.leanote.com/post/snowming/4e07af1cab60
[Cobalt Strike _ Bypass UAC]: http://blog.leanote.com/post/snowming/b6f671477095
[CobaltStrike 2]: https://mp.weixin.qq.com/s/sYfvD0XQqi6BFw70_jrv5Q
[CS _ _ Powershell]: http://blog.leanote.com/post/snowming/6a724671de78
[Cobalt Strike 2]: http://blog.leanote.com/post/snowming/d5d2b4ba20d0
[blog]: https://blogs.jpcert.or.jp/en/2018/08/volatility-plugin-for-detecting-cobalt-strike-beacon.html
[Toolset]: https://github.com/RomanEmelyanov/CobaltStrikeForensic
[Cobalt Strike 3]: https://mp.weixin.qq.com/s/VHpcHzLc829hmQjrx1139A
[cobaltstrike c2]: https://github.com/verctor/Cobalt_Homework
[tool]: https://github.com/Mkv4/cobaltstrike-authfile-decrypt